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Real time demonstration of high bitrate quantum random number generation 
with coherent laser light 
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We present a random number generation scheme that uses broadband measurements of the vacuum field 
contained in the radio- frequency sidebands of a single- mode laser. Even though the measurements may 
contain technical noise, we show that suitable algorithms can transform the digitized photocurrents into a 
string of random numbers that can be made arbitrarily correlated to a subset of the quantum fiuctuations 
(High Quantum Correlation regime) or arbitrarily immune to environmental fiuctuations (High Environmental 
Immunity) . We demonstrate up to 2 Gbps of real time random number generation that were verified using 
standard randomness tests. 



Reliable and unbiased random numbers (RNs) are 
needed for a range of applications spanning from numer- 
ical modeling to cryptographic communications. With 
the numerous improvements in quantum key distribu- 
tion (QKD) protocols^^^, fast and reliable RN generation 
is now one of the main technical impediment to high- 
speed QKD. Whilst there are algorithms that can gener- 
ate pseudo-RNs, they can never be perfectly random nor 
indeterministic. True RNs from physical processes may 
offer a surefire solution. 

Several physical RN generation schemes have been pro- 
posed and demonstrated^"—, including schemes based on 
single photon detections'^ ^. The limit in speed of these 
systems are in the dead time of photon counters. An 
alternative quantum approach to photon counting is to 
use the vacuum fiuctuations of an electromagnetic field 
for RN generation^^^^^. In this letter, we demonstrate 
a simple scheme to measure and convert vacuum field 
fiuctuations into RNs. 

The schematic of the quantum RN generator is shown 
in Fig.[TJ A single-mode laser beam at 1550 nm is used as 
the light source. A few mW of light is split into two equal 
intensity beams and detected by a pair of photodetectors 
in a balanced homodyne scheme. When the average laser 
field amplitude a is significantly larger than the vacuum 
field fiuctuation the subtracted photo-current from the 
pair of detectors is proportional to aXy{uj), where Xy 
is the quadrature amplitude of the vacuum field. The 
balanced homodyne setup therefore measures the ampli- 
fied quadrature amplitude of the vacuum field fiuctua- 
tions. Only sideband frequencies well above the technical 
noise frequencies of the laser are used for RN generation 
(shaded region of the radio frequency (RF) spectrum of 
Fig. HJa)). This is achieved by demodulating the pho- 
tocurrent with an RF frequency (1.6 GHz) followed by a 
low pass filter. The undulations in the spectra are due 
to non-uniform RF electronic gain in the photodetectors 
amplification stages (Fig. [TJb)). Nevertheless, the quan- 
tum noise has a constant clearance above the electronic 



noise level of 8.5 dB. Using a Field-programmable Gate 
Array (FPGA) a filter function can be programmed to 
neutralize the non-uniform electronic gain as shown in 
Fig. mc). Finally, using suitable numerical processes, 
the quantum noise is converted into a sequence of ran- 
dom digital bits as depicted by the 8-bits colour code in 
Fig.Hd). 

In practice, vacuum fiuctuations cannot be detected 
in complete isolation. The electronic noise of the photo- 
detector will be superimposed onto the measured pho- 
tocurrents. While it is reasonable to assume that the 
quantum noise of a vacuum field Xy is perfectly random 
over all frequencies and cannot be tampered with, elec- 
tronic noise may not possess these ideal properties. For 
this letter, we would like to consider two possible scenar- 
ios. 

In the first scenario, we assume that the electronic 
noise is untampered. We wish to find a protocol to gen- 
erate RNs solely from closely tracking the quantum fiuc- 
tuations of the vacuum field. We will show that in this 
scenario, a 1-bit digitized encoding of the vacuum fiuctu- 
ations, together with thresholding, can indeed allow arbi- 
trarily high quantum correlation. In the second scenario 
we assume that the electronic noise may be tampered 
and is untrustworthy. We desire an algorithm that will 
generate RNs that are tamper-proof, even in the presence 
of possibly forged electronic noise. Provided that quan- 
tum noise remains the dominant source of noise, we will 
show that digitizing the vacuum fiuctuations into mul- 
tiple bits, and then discarding the most-significant bits, 
can indeed allow arbitrarily high environmental immu- 
nity. Correlations between environmental noise and the 
generated RNs can be made arbitrarily small. 

We describe the measured signal as X^ = X^ + Xg, 
where Xg corresponds to the electronic noise superim- 
posed onto the vacuum fiuctuations Xy (see Fig. Efa)). 
Xg and Xy can be modeled as two uncorrelated Gaussian 
distributions of zero mean and variance Ve and Vy, re- 
spectively. Xjn is also Gaussian with a conditional prob- 
ability given by 
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FIG. 1. Random number generation schematic. Top left figure shows the spectra of the quadrature amplitudes for the vacuum 
fluctuations, Xv and the laser mode Xa- The shaded frequency range, Acj, shows a region where the laser source is quantum 
noise limited, (a) Sum (S) and difference (D), of the laser vacuum fluctuations, as well as electronic noise (E) from a pair of 
homodyne photodetectors. The shaded frequency range is used for generating random numbers, (b) Digitized and demodulated 
shot noise and electronic noise spectra, (c) A filter function is used to correct for the non-uniform electronic gain. The quantum 
noise at this stage has an unbiased Gaussian distribution with a normalized mean at dB and dark noise clearance of 8.5 dB. 
(d) High randomness of the final digital random numbers depicted by the featureless color plot. BS: 50/50 beamsplitter; D: 
photodiode; ADC: Analog to digital converter; NUM. PROC.: Numerical processing algorithm; Q-RN: Final generated random 
numbers. 



In order to extract n-bit RNs from Xm with uniform 
probabilities, we need to transform the measured Gaus- 
sian distributed photocurrent into a uniform distribution 
ofYm = [1 + eTf{Xm/V2V^)] /2. The n-bit RNs require 
the distribution F^ to be divided into 2^ equal and non- 
overlapping domains (as shown in Fig. [2] for the case of 
n = 3). We can then index each domain, preferably by 
using Gray's binary encoding^"^, to minimize the pertur- 
bations due to unaccounted technical noise so that the 
2^ domains now correspond directly to the n-bits RNs 
(see Fig.EJb)). 

We introduce a thresholding condition to reject data 
points that fall within a certain range A^ between two 
adjacent domains (see Fig. [2]). We digitize continu- 
ous variable quantities into a binary n-bits with Ym = 
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(Y^'^Y^n^-yr), where F^ G {0,1}. Y^'^ is the most 
significant bit (MSB) and Yj^^ the least significant bit 
(LSB) in Gray's binary decomposition. We define a prob- 
ability of error, Pe,g = PiYm 7^ Yy^). This quantifies 
the discrepancy between a measured bit and the vac- 
uum fluctuations. Perturbation from the electronic noise, 
which causes the digitized bit to differ from the vacuum 
fluctuation, is referred to as an error. P^^q = means 
that the generated RNs are the perfect digitization of 
pure vacuum fluctuations. 

We also introduce the notion of information leakage 
from the electronic noise /e- This information leakage 
is the amount of information that can be imposed on 
the final random bits by somebody having access to the 



electronic noise. Using Shannon's binary information for- 
mula, we obtained 

/e = 1 + Pe,e log2 (Pe,e) + (1 - Pe,e) log2 (1 - Pe,e) (2) 

where analogous to Pe,q, Pe,e is the probability of error 
that the measured i^^-hit differs from the electronic noise. 
/e = means that the generated RNs are indeterminable 
even with full knowledge of the electronic noise. 

Figure [3] shows /e and Pe^q plotted as a function of the 
RN generation rate R = n[l— Pthr(A^)] for n = 1, 2, 3, 4, 5 
bits extracted per measurement, where Pthr(At) is the 
probability that a bit is rejected because it lies within 
one of the thresholding areas. From Fig. [3fa) we note 
that the amount of information leaked through the elec- 
tronic noise decreases for the least significant bit (LSB) 
with high bit encoding. Moreover, thresholding paradox- 
ically increases /e • Minimizing /e therefore requires high 
bit encoding, no thresholding, and omission of all but the 
LSB. In the case of 5-bits encoding, the best result ob- 
tained using this protocol was /e < 10~^ for the LSB. 

In Fig. [3](b) we see that the MSBs are the most accu- 
rate representation of the vacuum fluctuations. In con- 
trast to information leakage, thresholding in general re- 
duces the probability of error P^^q since thresholding ef- 
fectively discards all data where electronic noise is the 
dominant source of error, leaving behind only data with 
large vacuum fluctuations. Thresholding is therefore fa- 
vorable for increasing the correlations between the RNs 
and the vacuum fluctuations. For multi-bit rate encod- 
ing, however, Pe,g is nonzero even with very large thresh- 
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FIG. 2. (a) Gaussian distribution of the measured and vac- 
uum fluctuations P{Xm,v)^ and tfie conditional probability 
distribution of P{Xm\Xv) for an arbitrary value of X^ = 1. 
The figure is plotted for a Xe that is 8.5 dB below Xy. (b) IG 
samples of the Gaussian distributed Xm after 12-bits digital 
filtering. Experimental data is plotted with blue bars and its 
corresponding theoretical expectation with purple lines, (c) 
The Gaussian error function is used to transform Xm into a 
uniform distribution of P{Ym)- Thresholding (represented by 
the green bars) can be introduced to reject data points that 
fall within a At range from the boundary of two adjacent 
domains. 



olding. In fact, at high bit rates Pe,g is no longer critically 
dependent on thresholding. An ideal protocol for maxi- 
mizing the quantum correlation of RN is therefore a sin- 
gle bit encoding with threshold value significantly larger 
than the electronic noise. From this we can define two 
regimes of operation for our quantum RN generator: (i) 
A regime of high quantum correlation where vacuum fluc- 
tuations are accurately converted to digital RNs. (ii) A 
regime of high environmental immunity where tampering 
of photodetector electronic noise does not compromise 
the indeterminacy of the RN generation. 

We implemented our proposed algorithm in real-time 
using an integrated 12 bits 250 Msamples per second 
analog to digital converter (ADC) and a FPGA. Our 
results show a uniformly distributed random binary se- 
quences where 8 bits are extracted for each measurement 
without thresholding, corresponding to a real-time ran- 
dom bit rate generation of 2 Gbps. This demonstration 
consistently passes the NIST— and Diehard randomness 
tests^^. 

In the context of the two previously introduced 
regimes, we also implemented a 'high quantum correla- 
tion^ single-bit encoding with thresholding rejecting 90% 
of the samples, and a 'high environmental immunity^ zero 
threshold 8-bit encoding that only keeps the 4 LSBs. In 
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FIG. 3. (a) Information leakage, /e, for multi-bits division 
of vacuum fluctuations as a function of RN generation rate, 
R corresponding to the number of bits extracted times the 
probability of not being rejected by the thresholding proce- 
dure. The LSB from the Gray code shows the least amount 
of information leakage, (b) Probability of error, Pe,g, plotted 
as a function of R. Fewer bits encoding gives smaller Pe,g- 



the 'high quantum correlation^ mode of operation the bi- 
nary random sequence is produced at a rate of 25 Mbps, 
with Pe,g < 10~^, whilst in the 'high environmental 
immunity' regime the random bit-rate is 1 Gbps with 
Ie < 10-^ 

In conclusion, we have demonstrated the generation 
of continuous random bit sequences at a rate of 2 Gbps 
in real time by sampling the broadband vacuum fluc- 
tuations. We proposed two methods of generating RNs 
where: (i) quantum correlation is optimized for a near 
ideal representation of a thresholded random subset of 
the vacuum fluctuations, and (ii) environmental immu- 
nity is optimized to combat against possible tampering 
of the electronic noise. 
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